# Operation Logs through Server-to-Server OAuth App **URL:** \ **Category:** API and Webhooks\ **Created:** [January 2, 2024, 10:20pm UTC](https://devforum.zoom.us/t/operation-logs-through-server-to-server-oauth-app/101088 "2024-01-02T22:20:21Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![joey.beaudette](https://avatars.discourse-cdn.com/v4/letter/j/f07891/32.png) [@joey.beaudette](https://devforum.zoom.us/u/joey.beaudette)\ **Post date:** [January 2, 2024, 10:20pm UTC](https://devforum.zoom.us/t/operation-logs-through-server-to-server-oauth-app/101088/1 "2024-01-02T22:20:21Z")
Hi all, I am trying to pull operation logs via API. My confusion is with the scopes. If I try to pull the data (without the right scopes), the error message gives me a hint: {“code”: 4700, “message”: “Invalid access token, does not contain scopes: [report:master, report:read:master].”} The issue is that with full admin rights, I cannot see these scopes available for addition to the app. I also noticed that other app types have differing scopes. “Build App”, for example, does have report:master, though I am using Server-to-Server OAuth which does not have that requirement. So, what gives? Are some of the APIs not available consistently? EDIT: Update on this. This could be related to how those scopes tie into Role permissions. Interestingly, the role for my account did NOT have Server-to-Server Oauth App selected, but I was still able to make one. Selecting this permission for the role did not change the availability of the scopes for the app. There could be some combination of permissions that is needed to make the scope available, but I haven’t found any documentation on this yet. ---
**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\ **Post date:** [January 3, 2024, 4:18pm UTC](https://devforum.zoom.us/t/operation-logs-through-server-to-server-oauth-app/101088/3 "2024-01-03T16:18:16Z")
> [@joey.beaudette](#): > > Interestingly, the role for my account did NOT have Server-to-Server Oauth App selected, but I was still able to make one. Selecting this permission for the role did not change the availability of the scopes for the app. Yes this could be part of is. Are you a user on the [master account](https://developers.zoom.us/docs/api/rest/master-account-apis/)? Is the Manage subaccount role enabled for you? You can adjust role permissions with this [guide](https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0064983). I believe the account owner has to add these [master level scopes](https://developers.zoom.us/docs/integrations/oauth-scopes/), but if you’re able to answer the above, we can see if this is still true. ![Screenshot 2024-01-03 at 11.14.12 AM](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/2/7/275765b1c44a28c54fe23c93c516ef6227959258.png) ---
**Author:** ![joey.beaudette](https://avatars.discourse-cdn.com/v4/letter/j/f07891/32.png) [@joey.beaudette](https://devforum.zoom.us/u/joey.beaudette)\ **Post date:** [January 3, 2024, 6:00pm UTC](https://devforum.zoom.us/t/operation-logs-through-server-to-server-oauth-app/101088/4 "2024-01-03T18:00:35Z")
Thank you for responding! I have just been learning about that “master account” as well. The wording in your screenshot has slightly different wording than this link [Master Account API](https://developers.zoom.us/docs/api/rest/master-account-apis/) The relationship of an individual “Owner” account and a Master account (if it exists) is still not entirely clear to me. If there is an Owner but no Master account, is the owner able to configure that, or does this need a discussion with a sales rep? ---
**Author:** ![joey.beaudette](https://avatars.discourse-cdn.com/v4/letter/j/f07891/32.png) [@joey.beaudette](https://devforum.zoom.us/u/joey.beaudette)\ **Post date:** [January 3, 2024, 6:54pm UTC](https://devforum.zoom.us/t/operation-logs-through-server-to-server-oauth-app/101088/5 "2024-01-03T18:54:16Z")
Solution/Explanation from ticket- When I am referring to your Zoom account as a master account, that is the entire account(not any specific user). 1. You will need to speak with your Account Executive if you want to have your Zoom account converted to a master account. They would also be able to explain if there are any extra costs to this process. 2. Once you have your account converted, you will then need to make a subaccount. Subaccounts are completely and entirely separate Zoom accounts. 3. The Master account APIs may then be run to obtain data from your SubAccounts, but only the subaccounts. These APIs cannot be ran against your Master Account. Please let me know what additional questions you have. At your service, Jon Van Houten ---
**Author:** ![gianni.zoom](https://sea2.discourse-cdn.com/flex016/user_avatar/devforum.zoom.us/gianni.zoom/32/32523_2.png) [@gianni.zoom](https://devforum.zoom.us/u/gianni.zoom)\ **Post date:** [January 4, 2024, 3:51pm UTC](https://devforum.zoom.us/t/operation-logs-through-server-to-server-oauth-app/101088/6 "2024-01-04T15:51:34Z")
Glad this is now resolved! ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/zoomdeveloper/original/3X/6/1/614bdd549b610bbaa46ff934617683a02bdaa03c.png) [@system](https://devforum.zoom.us/u/system)\ **Post date:** [January 5, 2024, 3:51pm UTC](https://devforum.zoom.us/t/operation-logs-through-server-to-server-oauth-app/101088/7 "2024-01-05T15:51:42Z")
Closed on January 5, 2024, 3:51pm UTC This topic was automatically closed 24 hours after the last reply. New replies are no longer allowed.